This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer File: uqDyWO70sr9LuqhDDB5YyowYjqc.cer (raw, json) Hash identifier: V4SH4ctFYlhc4cMlElqOh970ucK0FfKjoKErhIjDnIk= Subject key identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A91D5490CC9316EE318B659903D495A66 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 17 Nov 2025 12:41:05 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: IP: 91.226.30.0/23 IP: 2a01:48a0::/32 IP: 2a05:1e40::/29 IP: 2a06:1300::/29 IP: 2a06:4380::/29 IP: 2a06:d640::/29 IP: 2a09:2980::/29 IP: 2a09:9440::/29 IP: 2a09:a200::/29 IP: 2a09:a500::/29 IP: 2a09:a800::/29 IP: 2a09:af80::/29 IP: 2a09:bc00::/29 IP: 2a09:c700::/29 IP: 2a09:cf00::/29 IP: 2a09:d700::/29 IP: 2a09:dd00::/29 IP: 2a09:e300::/29 IP: 2a09:e700::/29 IP: 2a09:ef00::/29 IP: 2a0a:b380::/29 IP: 2a0a:c0c0::/29 IP: 2a0b:9000::/29 IP: 2a0c:72c0::/29 IP: 2a0c:9480::/29 IP: 2a0d:3c40::/29 IP: 2a0d:95c0::/29 IP: 2a0d:afc0::/29 IP: 2a0d:c100::/29 IP: 2a0d:cdc0::/29 IP: 2a0d:f840::/29 IP: 2a0d:fcc0::/29 IP: 2a0e:3f40::/29 IP: 2a0e:5880::/29 IP: 2a0e:7f00::/29 IP: 2a0e:b200::/29 IP: 2a0e:c4c0::/29 IP: 2a0e:eec0::/29 IP: 2a0f:1800::/29 IP: 2a0f:3100::/29 IP: 2a0f:9d00::/29 IP: 2a11:3c40::/29 IP: 2a11:4040::/29 IP: 2a11:6540::/29 IP: 2a11:6580::/29 IP: 2a11:6bc0::/29 IP: 2a11:6d00::/29 IP: 2a11:84c0::/29 IP: 2a11:9f40::/29 IP: 2a11:a180::/29 IP: 2a12:2040::/29 IP: 2a12:2fc0::/29 IP: 2a12:3040::/29 IP: 2a12:38c0::/29 IP: 2a12:39c0::/29 IP: 2a14:a400::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:91:d5:49:0c:c9:31:6e:e3:18:b6:59:90:3d:49:5a:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 17 12:41:05 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cd:cb:ed:15:2c:da:99:cc:4f:8a:74:fa:a3: 13:0e:71:a7:8a:0c:03:8e:7f:7e:1c:ae:69:7f:75: 93:1d:ce:17:92:80:3d:27:42:28:b1:72:c8:81:75: 04:43:a8:e7:3c:f5:09:bb:59:83:35:2b:51:5a:eb: ca:f6:69:fa:7c:9a:ff:9d:24:06:92:b4:87:2f:6e: 2c:6a:86:66:85:7a:e5:1d:99:e2:15:dc:f6:03:84: a8:cb:71:56:97:6f:0c:66:19:71:0d:5a:4c:d4:cb: 41:24:49:75:1b:d7:1b:8a:1e:22:f8:18:3a:20:a2: ff:60:3f:24:64:36:55:45:25:c0:ae:16:bc:da:77: c8:d0:36:27:2d:f0:60:c7:1e:1c:5b:6e:db:41:fe: e8:22:c3:9f:e8:ec:04:ef:c2:b2:40:e9:9d:9b:37: 6c:13:9c:06:dd:ef:a1:19:de:f5:32:85:04:5d:1e: c8:87:ee:bb:e1:20:e8:6d:31:84:41:a8:26:9d:a4: a7:c8:ce:5b:55:33:fd:ce:cf:34:7d:b3:1f:1c:fb: eb:3d:dd:56:48:6f:90:cc:ef:8e:d8:fa:29:98:62: 17:7b:19:25:fe:f6:fe:6d:1e:d7:c1:2e:97:48:58: a1:77:53:6a:2f:a2:49:ef:50:bf:86:27:75:bb:ef: d3:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.226.30.0/23 IPv6: 2a01:48a0::/32 2a05:1e40::/29 2a06:1300::/29 2a06:4380::/29 2a06:d640::/29 2a09:2980::/29 2a09:9440::/29 2a09:a200::/29 2a09:a500::/29 2a09:a800::/29 2a09:af80::/29 2a09:bc00::/29 2a09:c700::/29 2a09:cf00::/29 2a09:d700::/29 2a09:dd00::/29 2a09:e300::/29 2a09:e700::/29 2a09:ef00::/29 2a0a:b380::/29 2a0a:c0c0::/29 2a0b:9000::/29 2a0c:72c0::/29 2a0c:9480::/29 2a0d:3c40::/29 2a0d:95c0::/29 2a0d:afc0::/29 2a0d:c100::/29 2a0d:cdc0::/29 2a0d:f840::/29 2a0d:fcc0::/29 2a0e:3f40::/29 2a0e:5880::/29 2a0e:7f00::/29 2a0e:b200::/29 2a0e:c4c0::/29 2a0e:eec0::/29 2a0f:1800::/29 2a0f:3100::/29 2a0f:9d00::/29 2a11:3c40::/29 2a11:4040::/29 2a11:6540::/29 2a11:6580::/29 2a11:6bc0::/29 2a11:6d00::/29 2a11:84c0::/29 2a11:9f40::/29 2a11:a180::/29 2a12:2040::/29 2a12:2fc0::/29 2a12:3040::/29 2a12:38c0::/29 2a12:39c0::/29 2a14:a400::/29 Signature Algorithm: sha256WithRSAEncryption ad:a2:7a:99:97:ff:37:97:80:7e:bb:7e:64:5e:83:9d:38:54: 66:0c:d4:a7:01:a8:11:2f:1c:21:b6:66:0f:72:bb:70:52:c3: 40:05:a7:30:95:0e:cb:54:cc:1f:ae:47:2f:d8:4d:df:b3:f9: b1:14:22:03:18:df:b6:21:e8:b1:a7:ac:05:c3:4d:13:36:ef: 06:30:96:9e:25:b9:65:9e:d0:cb:6c:4a:3e:71:e8:1f:0c:d8: cc:bb:04:a3:07:e2:1e:df:cf:ad:a6:d1:ae:e6:29:0a:02:cb: fa:41:0c:bf:03:01:76:8a:fa:46:b5:a0:12:8e:8f:c1:67:9d: 36:1f:79:ab:01:88:2e:d0:b1:ea:72:07:d7:6c:d9:cb:63:ee: a2:08:9c:57:97:c3:1f:b5:c8:51:c7:de:f3:4f:36:8e:67:e8: 8e:90:94:3d:05:86:09:79:a5:81:f2:f2:03:a8:a3:d8:a2:2b: 1d:c1:20:1e:e9:e5:54:0d:12:5c:7a:85:ae:9a:07:0f:3a:8f: 4f:c5:1e:93:4c:bb:60:b2:bc:39:be:61:80:fd:30:c0:52:ed: 4f:69:f4:3f:26:42:82:47:f1:c5:49:e3:94:52:55:d8:c3:e4: 0d:b1:2a:69:74:e7:c5:6c:70:13:7e:9f:eb:1b:5b:92:72:bf: 18:53:a8:10 -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgISAZqR1UkMyTFu4xi2WZA9SVpmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTE3MTI0MTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYWEwZjI1OGVlZjRiMmJmNGJiYWE4NDMwYzFlNThjYThjMTg4ZWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwM3L7RUs2pnMT4p0+qMTDnGnigwD jn9+HK5pf3WTHc4XkoA9J0IosXLIgXUEQ6jnPPUJu1mDNStRWuvK9mn6fJr/nSQG krSHL24saoZmhXrlHZniFdz2A4Soy3FWl28MZhlxDVpM1MtBJEl1G9cbih4i+Bg6 IKL/YD8kZDZVRSXArha82nfI0DYnLfBgxx4cW27bQf7oIsOf6OwE78KyQOmdmzds E5wG3e+hGd71MoUEXR7Ih+674SDobTGEQagmnaSnyM5bVTP9zs80fbMfHPvrPd1W SG+QzO+O2PopmGIXexkl/vb+bR7XwS6XSFihd1NqL6JJ71C/hid1u+/TVwIDAQAB o4IEFzCCBBMwHQYDVR0OBBYEFLqg8lju9LK/S7qoQwweWMqMGI6nMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzExLzVlMGVl MS1jODMzLTQyNDEtOTYwYS1lNTc2OGQ2YjE4MmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTEvNWUwZWUx LWM4MzMtNDI0MS05NjBhLWU1NzY4ZDZiMTgyYy8xL3VxRHlXTzcwc3I5THVxaERE QjVZeW93WWpxYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBsAYIKwYB BQUHAQcBAf8EggGfMIIBmzAMBAIAATAGAwQBW+IeMIIBiQQCAAIwggGBAwUAKgFI oAMFAyoFHkADBQMqBhMAAwUDKgZDgAMFAyoG1kADBQMqCSmAAwUDKgmUQAMFAyoJ ogADBQMqCaUAAwUDKgmoAAMFAyoJr4ADBQMqCbwAAwUDKgnHAAMFAyoJzwADBQMq CdcAAwUDKgndAAMFAyoJ4wADBQMqCecAAwUDKgnvAAMFAyoKs4ADBQMqCsDAAwUD KguQAAMFAyoMcsADBQMqDJSAAwUDKg08QAMFAyoNlcADBQMqDa/AAwUDKg3BAAMF AyoNzcADBQMqDfhAAwUDKg38wAMFAyoOP0ADBQMqDliAAwUDKg5/AAMFAyoOsgAD BQMqDsTAAwUDKg7uwAMFAyoPGAADBQMqDzEAAwUDKg+dAAMFAyoRPEADBQMqEUBA AwUDKhFlQAMFAyoRZYADBQMqEWvAAwUDKhFtAAMFAyoRhMADBQMqEZ9AAwUDKhGh gAMFAyoSIEADBQMqEi/AAwUDKhIwQAMFAyoSOMADBQMqEjnAAwUDKhSkADANBgkq hkiG9w0BAQsFAAOCAQEAraJ6mZf/N5eAfrt+ZF6DnThUZgzUpwGoES8cIbZmD3K7 cFLDQAWnMJUOy1TMH65HL9hN37P5sRQiAxjftiHosaesBcNNEzbvBjCWniW5ZZ7Q y2xKPnHoHwzYzLsEowfiHt/PrabRruYpCgLL+kEMvwMBdor6RrWgEo6PwWedNh95 qwGILtCx6nIH12zZy2PuogicV5fDH7XIUcfe8082jmfojpCUPQWGCXmlgfLyA6ij 2KIrHcEgHunlVA0SXHqFrpoHDzqPT8Uek0y7YLK8Ob5hgP0wwFLtT2n0PyZCgkfx xUnjlFJV2MPkDbEqaXTnxWxwE36f6xtbknK/GFOoEA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:16:28 2025 by rpki-client